5ddb820e9aad6cd504249aef19a8eacdc213a8c4bb7f973655df7a2bc15a3019 | Triage

Sharing

General

Target

536ca6dad62e0cabba47b1d3269817a0_NeikiAnalytics.exe
Size

97KB
Sample

240522-22h52scd96
MD5

536ca6dad62e0cabba47b1d3269817a0
SHA1

27fb50e481d67ff1f586b85010fb738876ac8759
SHA256

5ddb820e9aad6cd504249aef19a8eacdc213a8c4bb7f973655df7a2bc15a3019
SHA512

e95cc9af3833d08954e0c77f42e4005b1e2718b6aea2e46d60cf22fadd5ab663991592fad8326e5d5eaab798b3d3072ee0ea068b7a192dccf58fc0d7c632e02d
SSDEEP

3072:5JjcF8KfCOcjk+guPVjSEhPlHb9VzPSM6pAX:5JonkkxudtvPSrAX

Score

7^/10

persistence upx

Malware Config

Targets

- Target
  
  536ca6dad62e0cabba47b1d3269817a0_NeikiAnalytics.exe
- Size
  
  97KB
- MD5
  
  536ca6dad62e0cabba47b1d3269817a0
- SHA1
  
  27fb50e481d67ff1f586b85010fb738876ac8759
- SHA256
  
  5ddb820e9aad6cd504249aef19a8eacdc213a8c4bb7f973655df7a2bc15a3019
- SHA512
  
  e95cc9af3833d08954e0c77f42e4005b1e2718b6aea2e46d60cf22fadd5ab663991592fad8326e5d5eaab798b3d3072ee0ea068b7a192dccf58fc0d7c632e02d
- SSDEEP
  
  3072:5JjcF8KfCOcjk+guPVjSEhPlHb9VzPSM6pAX:5JonkkxudtvPSrAX
Score

7^/10

persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2